trailbot-client - npm Package Compare versions

Comparing version 0.1.1 to 0.2.0

package.json

 {
   "name": "trailbot-client",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "TrailBot tracks files and logs in your server and triggers smart policies upon unwanted modification.",
-  "keywords": ["siem", "sem", "monitor", "watch", "logs", "trailbot", "audit trail", "integrity", "blockchain"],
+  "keywords": [
+    "siem",
+    "sem",
+    "monitor",
+    "watch",
+    "logs",
+    "trailbot",
+    "audit trail",
+    "integrity",
+    "blockchain"
+  ],
   "repository": "https://github.com/trailbot/client",
@@ -16,2 +26,3 @@ "homepage": "https://trailbot.io",
     "mkdirp": "^0.5.1",
+    "request": "^2.74.0",
     "simple-git": "^1.41.0"
@@ -18,0 +29,0 @@ },

README.md

@@ -5,7 +5,7 @@ [<img style="width:100%;" src="https://raw.githubusercontent.com/trailbot/vault/master/dist/img/banner.png">](https://trailbot.io)
 
-TrailBot tracks changes in your servers' files and logs and triggers smart policies.
+__Trailbot tracks your server's logs and files__, triggers [__Smart Policies__](https://github.com/trailbot/client/wiki/Smart-Policies) upon potentially unwanted modifications and generates an __immutable audit trail__ of everything happening in the system.
 
-[Smart Policies](https://github.com/trailbot/client/wiki/Smart-Policies) are simple scripts that receive notifications every time a watched file changes. They trigger actions such as emailing someone, rolling files back or even shutting the system down.
+[Smart Policies](https://github.com/trailbot/client/wiki/Smart-Policies) are simple scripts that get called every time a tracked file changes. They trigger actions such as emailing someone, rolling files back or even shutting the system down. There are [plenty of them ready to use](https://github.com/trailbot/client/wiki/Smart-Policies#ready-to-use-policies), and you can even [create your own](https://github.com/trailbot/client/wiki/Smart-Policies).
 
-TrailBot has three components:
+Trailbot has three components:
 + [__Watcher__](https://github.com/trailbot/watcher): a server daemon that monitors your files and logs, registers file events and enforces [smart policies](https://github.com/trailbot/client/wiki/Smart-Policies).
@@ -17,3 +17,8 @@ + [__Client__](https://github.com/trailbot/client): (this repository) desktop app for managing watchers, defining policies and reading file events.
 
+Current security solutions are based on an obsolete paradigm: building walls and fences. Companies advertise their overcomplicated perimeter security systems as if they were impenetrable. But even so, we hear everyday about __cyber security breaches__ at even the largest corporations.
 
+Moreover, they will not protect you at all from internal breaches and __insider threats__. Furthermore, most data resides nowadays in the cloud, where walls, border and fences fade and blur.
+
+With Trailbot, you can rest assured of the __integrity of your data__, being it a system log or any other important file. It doesn't matter if an outsider got access to your systems or an insider decided to go rogue—__you are now in control__.
+
 # Installation
@@ -31,2 +36,6 @@
 
+# LICENSE
+
+[MIT](https://github.com/trailbot/client/blob/master/LICENSE)
+
 [<img style="width:100%;" src="https://raw.githubusercontent.com/trailbot/vault/master/dist/img/footer.png">](https://stampery.com)

src/preload.js

@@ -1,5 +0,1 @@
-electron = require('electron').remote;
-fs = require('fs');
-git = require('simple-git');
-mkdir = require('mkdirp');
-os = require('os');
+eRequire = require;

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Trivial Package

Supply chain risk

Packages less than 10 lines of code are easily copied into your own project and may not warrant the additional supply chain risk of an external dependency.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

29151

increased by4.96%

Number of lines in readme file

39

increased by30%

Worsened metrics

Dependency count

6

increased by20%

Lines of code

7

decreased by-36.36%

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• + Addedrequest@^2.74.0